Microsoft Purview DLP introduces opt-in User-Based Alert Aggregation, consolidating alerts by user within a set time window to improve security triage. Rolling out from September to November 2025, admins can enable it in the compliance portal to group rule match events per user, enhancing investigation efficiency.
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).